CAP · Question #210
Which of the following individuals is responsible for preparing and submitting security status reports to the organizations?
The correct answer is C. Common Control Provider. The Common Control Provider is responsible for documenting and reporting the security status of common (shared/inherited) controls to the organizations and system owners that rely on those controls. They prepare security status reports that allow dependent systems to understand…
Question
Which of the following individuals is responsible for preparing and submitting security status reports to the organizations?
Options
- AChief Information Officer
- BSenior Agency Information Security Officer
- CCommon Control Provider
- DAuthorizing Official
How the community answered
(33 responses)- B3% (1)
- C94% (31)
- D3% (1)
Explanation
The Common Control Provider is responsible for documenting and reporting the security status of common (shared/inherited) controls to the organizations and system owners that rely on those controls. They prepare security status reports that allow dependent systems to understand the current posture of inherited controls. The Chief Information Officer oversees broad IT governance, the Senior Agency Information Security Officer (SAISO) advises on security policy, and the Authorizing Official makes authorization decisions-but the Common Control Provider owns the reporting of shared control status.
Topics
Community Discussion
No community discussion yet for this question.